System and method for providing application services with controlled access into privileged processes

• US 20050188370A1
• Filed: 04/21/2005
• Published: 08/25/2005
• Est. Priority Date: 01/28/2000
• Status: Active Grant

• Current Assignee: Musarubra US LLC (Musarubra US SellCo LLC)
• Original Assignee: Network Associates, Inc.
• Inventors: Melchione, Dan, Fallenstedt, Martin, Kouznetsov, Victor
• Granted Patent: US 7,716,719 B2
• Time in Patent Office: Days
• US Class Current: 717/174
• CPC Class Codes: G06F 21/52 during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 9/468 Specific access rights for resources, e.g. using capability register

Abstract

A system for providing application services in a computing environment having both user-mode processes and privileged-mode processes. A user-mode component is provided with an interface configured to access an exposed privileged-mode interface. A configuration component specifies a list of installable code components that are authorized for installation, wherein privileged-mode functions will only be executed in response to accesses by the user-mode code component when the installable code component is represented on the list.

Claims